In this first of two episodes of Risk! Engineers Talk Governance, due diligence engineers Richard Robinson and Gaye Francis explore how the SFAIRP principle (So Far As Is Reasonably Practicable) applies to managing internet risk.

Richard explains R2A's journey with data security, from backing up to CDs and running an in-house server, to shifting to cloud hosting during Melbourne's COVID lockdowns, and ultimately landing on an offline-first approach that keeps them and sensitive client data off the internet as much as possible.

Richard and Gaye discuss the growing tension between staying secure and staying connected and the rising problem of how AI systems may be designed to tell you what you want to hear rather than what's true.

The episode wraps with a relatable parallel: Gaye's battle to limit her daughters' screen time is, at its core, the same SFAIRP challenge organisations face every day – you need to be online in today’s world, but being online continuously creates risk. 

Tune in for Part 2 (Season 7, Episode 9), where they discuss risk in the public sphere.

If you’d like us to cover a specific topic or have any feedback we’d love to hear from you. Email [email protected].

For further information on Richard and Gaye’s consulting work with R2A, head to https://www.r2a.com.au, where you’ll also find their booklets (store) and a sign-up for their quarterly newsletter to keep informed of their latest news and events. 

Gaye is also founder of Australian women’s safety workwear company Apto PPE https://www.aptoppe.com.au.